Amendments to the Claims 

Please cancel the second instance of claim 114 without prejudice. 
Please amend the claims as follows: 
1-85. (Cancelled) 

86. (Currently amended) A method for protecting data in an apparatus having an 
open system architecture comprising: 

receiving encrypted data in the apparatus; 

generating raw data in a closed subsystem of the apparatus within the open system 
architecture, the raw data being generated in the closed subsystem by decrypting the 
encrypted data and optionally performing additional processing on the encrypted data; 

preventing access to the raw data outside of the closed subsystem; 

generating protected data in the closed subsystem by re-encrypting the raw data; 

and 

asserting the protected data from the closed subsystem to an external device or 

system. 

87. (Previously presented) The method of claim 86, wherein the encrypted data is 
encrypted using a first encryption protocol and the protected data is generated using a 
second encryption protocol. 

88. (Previously presented) The method of claim 86, wherein generating raw data 
includes: 

decrypting the encrypted data to generate decrypted data; and 
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decompressing the decrypted data to generate the raw data. 

89. (Previously presented) The method of claim 86, wherein the apparatus is an 
entertainment device. 

90. (Previously presented) The method of claim 86, wherein the encrypted data 
comprises digital video data. 

91 . (Previously presented) The method of claim 90, wherein receiving encrypted data 
includes reading the digital video data from a disk. 

92. (Previously presented) The method of claim 90, wherein the digital video data 
comprises high-definition digital video data, and wherein re-encrypting the raw data 
includes re-encrypting the raw data in accordance with the HDCP (High-bandwidth 
Digital Data Protection) protocol. 

93. (Previously presented) The method of claim 86, wherein re-encrypting the raw 
data includes the use of key data, and further comprising preventing the key data from 
being disclosed outside of the closed subsystem except to the external device or system. 

94. (Previously presented) The method of claim 86, wherein the encrypted data is 
received from a source external to the apparatus. 

95. (Previously presented) The method of claim 94, wherein the source external to 
the apparatus is the Internet. 
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96. (Currently amended) The method of claim 86, further comprising generating 
additional unprotected data and asserting the additional unprotected data to the closed 
system. 

97. (Currently amended) The method of claim 96, further comprising asserting the 
additional unprotected data from the closed system to the external device or system 
without encryption. 

98. (Previously presented) The method of claim 86, wherein the external device or 
system comprises a display device. 

99. (Previously presented) An apparatus comprising: 
an open system architecture; 

a closed subsystem within the open system architecture, the closed subsystem 
configured to receive encrypted data, decrypt the encrypted data to generate raw data, and 
re-encrypt the raw data to generate protected data, the closed system preventing access to 
the raw data outside of the closed subsystem; and 

an output, the closed subsystem to assert the protected data to an external device 
or system via the output. 

100. (Previously presented) The apparatus of claim 99, wherein the protected data 
comprises encrypted high-definition digital video data. 

101 . (Currently amended) The apparatus of claim 99, further comprising a second 
subsystem configured to generate additional unprotected data and to assert the additional 
unprotected data to the closed subsystem. 
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102. (Currently amended) The apparatus of claim 101, wherein the additional 
unprotected data comprises audiovisual data. 

103. (Currently amended) The apparatus of claim 101, wherein the additional 
unprotected data comprises menu information. 

104. (Currently amended) The apparatus of claim 101, wherein the closed subsystem 
is operable in a first mode to assert the protected data to the output and in a second to 
assert the additional unprotected data to the output. 

105. (Previously presented) The apparatus of claim 99, wherein the closed subsystem 
is operable to re-encrypt the raw data using key data. 

106. (Previously presented) The apparatus of claim 105, wherein the closed subsystem 
is operable to prevent release of the key data outside of the closed subsystem except to 
the external device or system. 

107. (Previously presented) The apparatus of claim 99, wherein the output includes 
one or more HDMI (Definition Multimedia Interface) compatible links from the 
apparatus to the external device or system. 

108. (Previously presented) The apparatus of claim 99, wherein the closed subsystem 
comprises an HD-DVD drive configured to decrypt high-definition digital video read 
from a disk to generate decrypted data, to perform decompression on the decrypted data 
to generate raw data, and to generate the protected data by re-encrypting the raw data. 



Attorney Docket No.: 8029P030 
Application No.: 10/679,055 



-5- 



Client Docket No.: SIMG0166 



109. (Previously presented) The apparatus of claim 99, wherein the closed subsystem 
is configured to re-encrypt the raw data in accordance with the HDCP (High-bandwidth 
Digital Data Protection) protocol. 

110. (Previously presented) The apparatus of claim 99, wherein the apparatus is 
configured to communicate bidirectionally with the external device or system to execute 
an authentication protocol the prior to assertion of the re-encrypted data to the external 
device or system. 

111. (Previously presented) The apparatus of claim 1 1 0, wherein the apparatus 
executing the authentication protocol includes verifying that the external device or 
system is authorized to receive the protected data and to establish shared secret values for 
use in encryption and decryption of data. 

1 12. (Previously presented) The apparatus of claim 99, wherein the apparatus is an 
entertainment device. 

113. (Currently amended) An apparatus comprising: 

an open system architecture configured to allow end users to add or remove 
hardware components, software modules, or both except within a closed subsystem of the 
apparatus ; 

[[a]] the closed subsystem of the apparatus, wherein the closed subsystem [[that]] 
does not provide a [[users]] user a way to add hardware or software thereto or remove 
hardware or software therefrom, the closed system being included in the open system 
architecture, wherein: 
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the closed subsystem is configured to receive data encrypted according to 
a first encryption protocol, decrypt the encrypted data to generate raw data, and 
re-encrypt the raw data using a second encryption protocol to generate protected 
data, and 

the closed system is configured to prevent access to the raw data outside 
of the closed subsystem; and 

an output, the closed subsystem to assert the protected data to an external device 
or system via the output. 

1 14. (Previously presented) The apparatus of claim 113, wherein the protected data 
comprises encrypted high-definition digital video data. 

114. (Cancelled) 

115. (Currently amended) The apparatus of claim 101 claim 124 . wherein the closed 
subsystem is operable to: 

assert the protected data with encryption to the output; and 

to assert the additional unprotected data without encryption to the output. 

116. (Previously presented) The apparatus of claim 101, wherein the closed subsystem 
is to re-encrypt the raw data using key data, and is to prevent release of the key data 
outside of the closed subsystem except to the external device or system. 

117. (Previously presented) The apparatus of claim 101, wherein the apparatus is 
configured to communicate bidirectionally with the external device or system to execute 
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an authentication protocol the prior to assertion of the re-encrypted data to the external 
device or system. 

118. (Previously presented) The apparatus of claim 1 17, wherein the apparatus 
executing the authentication protocol includes verifying that the external device or 
system is authorized to receive the protected data and to establish shared secret values for 
use in encryption and decryption of data. 

119. (Previously presented) A system comprising: 

a first apparatus with an open system architecture, the first apparatus including a 
closed subsystem within the open system architecture, the closed subsystem configured to 
receive encrypted content, decrypt the encrypted content to generate raw content, 
re-encrypt the raw content to generate protected content, and transmit the protected data 
via an output, the closed system preventing access to the raw content outside of the 
closed subsystem; and 

a second apparatus including an input to receive the protected content and 
decryption circuitry to generate raw content by decrypting the encrypted video data. 

120. (Previously presented) The system of claim 119, wherein the protected content 
comprises encrypted high-definition digital video data. 

121 . (Previously presented) The system of claim 120, wherein the second apparatus 
includes a digital video monitor. 

122. (Previously presented) The system of claim 1 19, wherein the closed subsystem is 
configured to receive the encrypted content from a remote source. 
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123. (Previously presented) The system of claim 119, wherein the closed subsystem is 
further to perform decompression on the decrypted data in the generation of the raw 
content. 

Please add the following new claim: 

124. (New) The apparatus of claim 1 13, further comprising a second subsystem 
configured to generate additional unprotected data and to assert the additional data to the 
closed subsystem. 



Attorney Docket No.: 8029P030 
Application No.: 10/679,055 



-9- 



Client Docket No.: SIMG0166 



